Privacy Policy

1. What information do we collect

Personal information you disclose to us

In short: we collect personal information that Clients and Visitors voluntarily provide to us.

The personal information we collect depends on the context of your interaction with us:

• From Clients, during onboarding: firm name, attorney/agent name, title, practice areas, phone number, email address, office address, text/SMS number, logo, headshot photo, and brand color/font preferences.
• From Visitors (people who open a Client's card), only if they choose to submit the intake form: name, phone number, email address, and a free-text description of their situation.

Payment data

We collect data necessary to process Client subscription payments, such as billing details. All payment data is handled and stored by Paddle, our payment processor — we do not store full card numbers ourselves. See Paddle's privacy notice at paddle.com/legal/privacy.

Information automatically collected

In short: some information — like IP address and device/browser characteristics — is collected automatically, and we separately record aggregate usage of each card.

When you visit a card page or our website, our hosting and CDN providers automatically log technical information such as IP address, browser type, device type, operating system, and referring URLs, for security and operational purposes.

Separately, Airocard records aggregate usage counts for each card — for example, how many times it was viewed, a video was played, or a specific action (call, email, website, directions, text, save-to-contacts) was tapped. These counts are stored per-card, not per-visitor, and are not used to build an individual visitor profile. This data is shown to the Client as usage insights (e.g., "your card was viewed 40 times this week"). Airocard's card pages do not set tracking cookies.

Information collected from other sources

In short: to prepare cards for prospective Clients before they sign up, we may collect limited business-contact information from public sources.

As part of preparing sample/prospect cards for outreach to potential Clients (not Visitors), we may collect publicly available business information — such as a firm's name, publicly listed attorney name, business email, phone number, and publicly posted logo/headshot — from sources like business directories or a firm's own public website. This is used solely to generate a sample card for outreach purposes and is not combined with Visitor intake data.

2. How do we process your information?

In short: to provide the Service, notify Clients of new leads, and improve the product — never to sell your data.

• To generate and host a Client's card, including assembling branded card images through our image-generation subprocessor
• To notify a Client by email and/or SMS when a Visitor submits an intake form
• To let a Visitor save a Client's contact details, place a call, send an email, get directions, or send a text — each handled by the Visitor's own device via a standard link (mailto:, tel:, sms:, or a maps link); Airocard does not see the content of any resulting call or text message
• To show Clients aggregate usage insights about their own card
• To process billing and respond to support inquiries
• To comply with legal obligations and protect the security of the Service

3. When and with whom do we share your personal information?

In short: with the specific subprocessors below, each limited to what they need to do their job — we do not sell personal information.

We may also share information in connection with a business transfer (merger, acquisition, or sale of assets), or when required to comply with a legal obligation.

4. Do we use cookies and other tracking technologies?

In short: our card pages do not use tracking cookies; our marketing website may use minimal, non-tracking technical cookies if required by the hosting platform.

Unlike many SaaS platforms, Airocard does not currently use Google Analytics, third-party advertising pixels, or cross-site tracking technology. Usage analytics on card pages are recorded via a direct, non-cookie-based request tied to the specific card viewed, described in Section 1 above.

5. SMS and email notifications — a note on consent

Clients who wish to change how they receive intake notifications can contact us using the details below.

6. How long do we keep your information?

• Client account and card configuration data is kept for as long as the account is active, plus a reasonable period after cancellation.
• Intake form submissions are retained in a bounded notification log (most recent 200 per card) — intended as a notification trail for the Client, not a permanent record. Clients are responsible for separately retaining anything they need long-term.
• Aggregate usage analytics retain day-by-day counts for 90 days; all-time totals persist for as long as the card exists.

When we no longer have a legitimate business need to retain information, we delete or anonymize it, or, where immediate deletion isn't possible (e.g. backup archives), we securely isolate it until deletion is possible.

7. How do we keep your information safe?

We use reasonable technical and organizational measures designed to protect personal information. No transmission over the internet or storage system can be guaranteed 100% secure, and transmission of information to and from the Service is at your own risk.

8. Do we collect information from minors?

We do not knowingly collect data from or market to anyone under 18. If we learn that we've collected information from someone under 18 without appropriate consent, we will take reasonable steps to delete it. Contact us at the email below if you believe this has occurred.

9. Do-Not-Track signals

No uniform standard for Do-Not-Track ("DNT") signals currently exists, and we do not respond to DNT browser signals at this time. If a legal standard is adopted, we'll update this notice accordingly.

10. Your privacy rights (US state residents)

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, and other states with comprehensive privacy statutes, you may have rights including:

• The right to know whether we are processing your personal data, and to access it
• The right to correct inaccuracies
• The right to request deletion of your personal data
• The right to obtain a copy of the personal data you've shared with us
• The right to non-discrimination for exercising these rights
• The right to opt out of processing for targeted advertising or sale of personal data (Airocard does not sell personal information or use it for targeted advertising as of this notice's date)

To exercise these rights, contact us at the email below. We'll need to verify your identity before fulfilling a request, and — depending on your state — you may be able to designate an authorized agent to submit a request on your behalf.

California "Shine the Light"

California residents may request, once per year and free of charge, information about the categories of personal information (if any) we've disclosed to third parties for direct marketing purposes. Submit such a request using the contact details below.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

12. How can you contact us?

Questions, requests to access/correct/delete your data, or appeals of a denied request can be sent to hello@airocard.com.